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Dear Sir: 

Tile outstanding OfBce Action rejects groupings of th^ claims under various 
combinations of Saliba, Ice, I rcka, and Schneier, 

The Office Action further objects to claims 2-4 6, 13, 16-18, 20, 23, 26, 30 aad 34. 



Appellants agree widi the Examiner's interpretation of tliese claims and ibr purposes of this 
Appeal would like those claim s interpreted consistent with ^ 4 of the March 23^ 2007 Office 
Action. However, Appellants believe ciairas 28-29 are in full Gompliance with 35 



Independent Claim 36 is directed toward a method of communication of data between 
a first computing device and a second computing device, comprising^ inier alia, the program 
on the first computing device receiving a message from the user, wherein the message 
comprises at least a first and second datum input by the user into the at least first and second 
input fields, respectively, of the Web page, wherein the first datum is confidential to the user 
and the second datum is non-confidential to the user, and wherein the fix^i datum comprises 
at least one of a credit card number and a social securitj^ number, the program identiiying thait 
the first datum is confidential and the second datum is non-confidential^ the first computing 
device communicating^ to the second computiiig device over an untrusted network^ the first 
datum w^ith encryption and tirst computing device conniiuiiieating, to the second computing 
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device over the uatrasted Betwork, the second datum vvithout eBcryption, wherein the 
eommunicating steps occur at least substantially simultaneous! y. 

Independent Claim 40 is directed toward a comparable ni^ans, and Independent Claim 
44 recites, inter cdia, a program delermining which of the at least i5rst and second user input 
fields contains confidential information^ wherein iho first datt^m is confidential to the user 
and the second datmn is not confidential to the user, tiie first computing device 
communicating the first datum to a second computuig device over an untrusted network with 
encryption of the first datum and the first computing device coxmtiunicating the second datum 
over the untmsted network to the second computing device vrfthout encryption of the second 
datum. 

IndependeBt Claim 45 recites, inter alia, a procedure operable to identify that the first 
datl^m is confidential and the second datum m non-confidential, wherein a second 
coinnrunicaiion device is in communication with the first commumeation device and wherein 
the first computing device communicates* to the second computing device over the untmsted 
network, the first datum with encryption and the second datimi without encryption. 

As discussed in the specifi cation, the entry (input) fields allow a user to input 
characters or text. These entiy (input) fields are portions of a web page tliat can include, for 
example, a mmiber of enti'>^ fields and a number of presentation fields, (See, for example, pgs. 
7 and 8 of Appellants specification,} 

Appellants respectfulSy submit tlie Office has failed to meet tiie minimum 
requirements to uphold either a refection asserting anticipation or a prima facie case of 
obviousness in that at least two features of the independent ciaims are neither taught nor 
suggested by any of the references of record ^ 

First, the independent claims include eitlier a program^ means^ or procedure that 

identities that the first datum is confidential and the second datum is non-confidential. While 

the Office Action points to coL 7, lines 5-8 of Saiiba for this teaching, Appellants respectfully 

submit there is absolutely no teaching or suggestion in this portion, nor in any other portion 

of Saliba, that teaches the claimed feature. Specifically, the relied upon portion of Saliba 

merely speaks to specialized ftmctions in the context of electronic shopping. The reUed upon 

portion of Saiida states: 

, .,(iii) storing, encrypting and forwarding to the merchants payment (e.g., credit card) 
infomiation, (iv) storing and providing to merchants address information for the 
shipping of goods, and (v) passing receipts for online purchases to an online banking 
application such as Microsoft Money. TM> or Quicken. RTM.. 
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Neither this portion^ xmr any otJicr portion of Slaiba, make any refercBce whatsoever 
to functionality nor compoiientry that is capaMe of performing the claimed feature. 

Secondly, the independent claims are directed toward communicating tlie information 
based on the identification such that, for examiple, the first datmrs is conimunicated witJi 
encryption aiid the second datum is communicated vvithout encryption. 

The Office Action references Col 1, lines 33-38, as as columns 4 and 7, fox this 
teadhing. One of the identified portions Sahba states : 'These hypertext docnmentB, which are 
created using HTML (the Hypertext Markup Language), contain the variGus product 
ofierings and other purchase'related information of the respective merchants, and typically 
include fonns for allowing consumers to retuiii payment and address information to the 
merchants. One signifieant problem with this approach is that the existing World Wide Web 
components (e,g.^ HTl'P, HTML, and existing standard Web browsers) are not well suited for 
performing general purpose client-server transactions over the Internet, making it difficuit to 
migrate cGnimeree--related ftinctionaiity to the client (consnmer) side.'' Column 4 disci^sses 
common definitions of the internet, client-server, etc, and the relied upon portion of column 7 
is reproduced above. 

Saliba m^ikes no mention nor provides any functionality or componentry in either 
these sections nor any other section that anticipates or renders obvious the claimed feature. 

Moreover, and in contrast to and teaching away from the claimed invention, Saliba 
actually specifically states ''Because all information ispmsedmmg stan<iard HTTP 
mesmges, end users ca^. access the electronic commerce system from behind Internet 
firewalls that permit the passage of HTTP traffic.'' (Emphasis Added) 

Additionally, Saliba is addressing an entirely different problem than the claimed 

invention. As discussed, for example, in Appellants specincation, flagged portions of w^eb 

pages are encrypted while same portion of the same web page are not encrypted, or vice versa 

In complete contrast, Sahba address: 

...the problem of peiibrmiag comxnerce-related transactions over the Interrset 
involves the use of specialized cheut and server software eoniponenis which communicate 
with one-another using some traiisport protocol other than HTTP, This approach, which is 
used by the version TO electronic coaimerce systeni of eShop hrc, generally requires the use 
of some dedicated IX^P/iF poit other than port SO, which is reserved for HTTP. (TCP/IP is a 
low ievel hiternet comniimicaiions protocol which uses port definitions to route messages to 
apphcations.) IJnforttiTiately, many company networks haye foteniM firewalls (he , systems 
which restrict traffic iuto aiid/or oat of the company network to provide network security) 
which block traffic on TGP/IP ports other than port 80 (and possibly a few other reserved 
ports), preverstiiig consumers fkjni using such electronic commerce systesns ixoni their 
computers at work. Additioiially , systems of this type do not take ad vai^tage of the 
widespread use by potential consumers of the World Wide ^¥eb. 



Ax feast based on these differences, claims 4-5, 10-1 1 , 1 S«l % 23^24, 26^30, 32-35 and 
44-4 5 are patentably distinguishabie from Saiiba. 

Ice is relied upon to teach steps "d" and "'e''. Ice is directed toward roHting of a 
traiisaotion card together witl^ a serial nuiiiber of an eiieryptiori unit loe States: ''at this point, 
the data tratisfbrred from the pefsonal coii^ptiter 14 the payment server 34 includes both 
encrypted information identifying the credit card number and unencrypted information 
specifying the serial number of the encryption unit 26 and the address to which the 
transaction is to be biiled.''' 

The credit card number of jce is however /lor a nser input field in that rhe payment 
seryer 34 generates the single-use credit card number and moreo^fer^ it is unclear where the 
OfBce finds support for these steps occnrring ''substantially simultaneoiisly"' as asserted in 
that Ice merely discloses transferring information. 

In that the remaimng references, taken either alone or in combination, fail to 
overcome the deficiencies noted above^ Appellants respect&liy submit that ail claims are 
patentably distinguishable from the cited references. 

The dependent claims ax'C even further patentabiy distinct from the cited ait. 

By way of example, claim 2 recites the step of communicating the first datum of the 
message with encryption of the first datum and the step of eommnnieating the second datnm 
of the message withont encrj-ptian of the second datum to include the step of communicating 
the first datum with encrjq^tion and the second datum without encryption in a same packet 
that comprises the message. See aim Ciaims 16, 37, and 42. 

This feature is neither suggested nor disclosed by the cited references. 

Dependent claim 3 recites the step of comrnnnicating the first datum of the message 
with encryption of the tirst datmn and the step of communicating the second datum of the 
message without encryption of the second datum to include the steps of conimunicatiDg the 
fi rst datum with ener)'^ption in a first packet of the massage and commimicating the second 
datum wi thout encryption in a seeond packet of the message different irom the tirst packet of 
the message. See also Claim 17. 

This feature is neither suggested nor disclosed by the cited references. 

Dependent claim 4 recites the step of communicating the first datum of the message 
with encn^^tion of the first datmn and the step of comniunicating tiie second datum of the 
message without encryption of the second datum comprise the step of ernploying a same path 
between the tlrst computing device and the second computing device to communicate the 
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first datBm with encryption ami the second datam without encryption. See also Claims 18, 38 
and 43 . 

This feamre is neither suggested nor disclosed by the cited references. 

Dependent claim 5 recites tiie step of employing fee same path to eommunicale the 
first datum with encryption and the second datum withoi^t encnrptioB to include the step of 
employing a TCP/IP passage between the first computing device and the second computing 
device to communicate the first datum with encryption and the second datum witliout 
encryption. See also Claim 19. 

Thi^ feature is neither suggested nor disclosed by the cited references. 

Dependent claim 6 recites the step of communicating the first datum of the inessage 
with encryption of the first datum to include the step of employing a key to encrypt the first 
datum of the message for coninumication of the first datmn from the first computing device 
to the second computing device with encryption of the first datum. See aim Claims 7-9 and 
20-22. 

This feature is neither suggested nor disclosed by the cited references. 

Dependent claim 10 recites the Web page to inckde hypertext markup language, the 
first datum to include the credit card number, the second datum to include information related 
to a purchase by the user and the program to be embedded in the Web page. The program is 
loaded on the first compnting device after the Web page is received by the first computing 
device. See aho claims 33, 38, and 43, 

This feature is neither suggested nor disclosed by the cited references; 

Remand of the case to the Examiner for a prompt Notice of Aflowanee is earnestly 
soHciled. 

The Notice of Appeal is believed to be timely and no additional fee is believed to be 
required. Hovn^ver, please credit any overpayment or debit any underpayment to Deposit 
Acconnt 19-1970 and if an extension is required such extension is hereby petitioned. 

Respeetfully submitted, 

SHERIDAN ROSS ^ ■ ■ ' 

' Jason IT Vick 

Registration No . 45 ,2 S5 
1560 Broadway, Suite 1200 
Pate:_iji:SgiJ£> Denver, Colorado 80202-5141 
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